Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203533303539.roa
File: 3138392e34352e31362e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier: LcEqJZ+D8nRiYge+rPN3TgqgDGMnk67XSXYNk7b1Rho=
Subject key identifier: 5F:4E:E6:07:4F:7E:A2:CB:29:9C:D3:69:2D:53:0B:9E:9E:83:7C:A9
Certificate issuer: /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial: 2595E80A2AAB712F455536F742CAE9C622D57941
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203533303539.roa
Signing time: Fri 03 Mar 2023 12:19:29 +0000
ROA not before: Fri 03 Mar 2023 12:14:29 +0000
ROA not after: Fri 01 Mar 2024 12:19:29 +0000
asID: 53059
IP address blocks: 189.45.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:95:e8:0a:2a:ab:71:2f:45:55:36:f7:42:ca:e9:c6:22:d5:79:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Validity
Not Before: Mar 3 12:14:29 2023 GMT
Not After : Mar 1 12:19:29 2024 GMT
Subject: CN=5F4EE6074F7EA2CB299CD3692D530B9E9E837CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:c4:99:45:32:37:0b:aa:d5:ff:3e:9d:19:
a9:c0:54:94:85:a4:29:1c:89:4a:5f:60:e7:c3:69:
ba:60:04:c0:7b:ce:e1:72:c6:2a:0f:12:45:1f:38:
0f:bd:01:29:b6:8b:a4:4e:40:08:db:f1:0e:e1:a1:
59:84:ef:9b:4e:a5:10:5d:de:ec:bd:3a:f0:6d:7b:
2f:c1:55:6d:6e:ac:da:09:bc:4f:bc:9c:29:47:16:
11:53:66:0f:0e:e7:d0:c9:78:fb:f3:69:7d:0e:81:
c3:9a:2c:4b:c3:51:ec:46:81:8a:b0:f8:e1:6f:8d:
b7:8e:58:8a:19:5c:db:e0:c6:ee:f4:71:64:d8:e1:
d6:c8:49:e3:b3:9c:4f:6e:f9:9a:26:11:48:71:ef:
bb:10:eb:3a:2e:09:d9:d3:74:8d:fb:14:ce:25:9e:
2b:9a:38:73:47:2a:fb:7e:6e:77:85:26:b2:b5:fc:
81:db:66:7a:cc:c4:c2:06:13:62:fe:a7:46:9b:fa:
ef:25:83:da:49:a0:57:7e:ff:8e:d3:56:08:a3:43:
21:fa:d2:73:90:07:04:44:6a:78:51:c7:9f:ba:71:
68:02:f4:5c:71:41:1e:0a:22:4a:cc:f0:b7:a2:ee:
7c:ff:5d:83:07:8e:b5:d0:9d:8f:f0:16:b4:92:0c:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:E6:07:4F:7E:A2:CB:29:9C:D3:69:2D:53:0B:9E:9E:83:7C:A9
X509v3 Authority Key Identifier:
keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31362e302f32302d3230203d3e203533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.45.16.0/20
Signature Algorithm: sha256WithRSAEncryption
65:8f:4b:d8:bb:b4:22:b7:a6:6c:3e:0e:24:17:3d:7d:4d:f4:
ab:94:8c:e5:07:83:66:77:78:83:51:dd:73:84:a2:16:3f:6c:
77:8c:71:b3:3a:9d:fd:68:ec:20:a6:df:c6:dd:d5:32:de:4a:
32:69:f6:2e:2e:cb:c4:88:d6:70:b1:1a:4b:93:ce:32:06:d3:
62:8e:4e:bd:24:96:3d:17:c6:af:89:06:b3:f1:8c:08:fb:b9:
53:6c:63:36:eb:f6:29:5c:56:2a:cd:72:bb:41:39:c2:ef:67:
69:ec:92:5f:13:22:c3:aa:9e:96:8f:44:8f:64:39:65:4f:29:
eb:2a:65:96:c9:30:fc:fb:32:c9:0b:b4:e0:f3:58:9a:1d:72:
48:a4:44:99:4e:a4:72:3c:2c:a3:be:5d:d3:79:b5:38:a2:05:
29:b7:4c:2f:63:64:c7:46:b4:d2:51:e1:50:3d:46:ea:ae:20:
4d:11:35:55:4e:48:45:74:13:ea:23:97:4d:56:82:9f:4f:61:
fe:6c:3f:e4:c0:0f:c3:15:d7:61:5c:8e:3d:c0:15:b1:65:e7:
2e:1e:b8:5c:4e:61:f2:bf:b6:51:f5:d3:39:72:4c:b3:60:a9:
88:fa:1b:1a:cc:97:5e:b2:0b:bb:da:49:8a:95:14:5e:b9:73:
da:10:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org